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DETAILED ACTION 



1. 



This is a non-Final Office Action in response to the communication filed orie September 



25, 2007. 



2. 



Claims 45-47 are canceled and new claims 49-51 are added. 



3. 



Claims 1-44 and 48-51 have been examined and are pending. 



Response to Arguments 

4. Applicant's arguments with respect to claims 1-44 and 48-52 have been considered but 
are moot in view of the new ground(s) of rejection. 



5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as 
set forth in section 102 of this title, if the differences between the subject matter sought to be 
patented and the prior art are such that the subject matter as a whole would have been obvious 
at the time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains. Patentability shall not be negatived by the manner in which the invention 
was made. 

6. Claims 1-12 and 49 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Hellman (US Pat. No.: 5, 872, 917) in view of Salowey t al. (hereinafter referred to as Salowey, 
US Pat. No.: 7, 171,555). 



Claim Rejections - 35 USC § 103 



As per claim 1 : 
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Hellman discloses a method for authenticating a computer, the method comprising the 
following steps: 

transmitting credential and a computer challenge from the second computer to the first 
computer when the second computer is to be authenticated (figure 1: 16, 18; 
column 6: lines 23-45); 

transmitting a response to said computer challenge from said first computer to said second 
computer (column 3: lines 30-45; column 6: lines 23-45); and 

verifying said response with said second computer in order to authenticate (column 3: 
lines 1-45; column 5: lines 33-45). 

Hellman does not explicitly disclose issuing a credential fi-om a first computer to a 
second computer and authentication of the computers. Salowey, in analogous art, however, 
discloses issuing a credential fi^om a first computer to a second computer and authentication of 
the computers (Column 3: lines 35-40; column 4: lines 15-21; column 6: lines 15-21; column 7: 
lines 1-10). Therefore, it would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to modify the system disclosed by Hellman to include 
authentication of the computers. This modification would have been obvious because a person 
having ordinary skill in the art would have been motivated to do so to provide a method for 
communicating a security credential within a network device authentication conversation as 
suggested by Salowey in (column 3: lines 15-27). 

As per claim 2: 
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Hellman discloses a method, wherein the challenge is a random number generated by the 
second computer and the first computer computes the response to the challenge by performing a 
predetermined function on the random number (column 5: lines 56-67). 

AS per claim 3: 

Salowey discloses a method, wherein the second computer determines whether the first 
computer response is valid by performing the predetermined function on the random number and 
comparing the resuh to the response (column 5: lines 50-55). 

As per claim 4: 

Hellman discloses a method, wherein the predetermined function is a hash function 
(column 7: lines 51-15). 

As per claim 5: 

Hellman discloses a method, wherein the second computer establishes a connection with 
the first computer when the response is valid (column 2: lines 50 -58). 

As per claim 6: 

. Hellman discloses a method, wherein the first computer issues a credential with a time 
limit and the first computer determines whether the credential transmitted from the second 
computer is valid by determining the expiration time of the credential (column 3: lines 25-35). . 
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As per claim 7: 

Hellman discloses a system for authenticating a computer, the system comprising: 
a first computer (figure 1: 12); and 

a second computer in communication with the first computer (figure 1 : 14-22); 

wherein the first computer and the second computer are configured to execute the 

following instructions (figure 1: 14-22): 
transmit the credential and a challenge from the second computer to the first computer 

when the second computer is to be authenticated (figure 1: 16, 18; column 6: lines 

23-45); 

transmit a response to the challenge fi-om the first computer to the second computer 

(column 3: lines 30-45; column 6: lines 23-45); and 
verify the response with the second computer in order to authenticate (column 3: lines 1- 

45; column 5: lines 33-45). 

Hellman does not explicitly disclose issuing a credential from a first computer to a 
second computer and authentication of the computers. Salowey, in analogous art, however, 
discloses issuing a credential from a first computer to a second computer and authentication of 
the computers (Column 3: lines 35-40; column 4: lines 15-21; column 6: lines 15-21; column 7: 
lines 1-10). Therefore, it would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to modify the system disclosed by Hellman to include 
authentication of the computers. This modification would have been obvious because a person 
having ordinary skill in the art would have been motivated to do so to provide a method for 
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communicating a security credential within a network device authentication conversation as 
suggested by Salowey in (column 3: lines 15-27). 

As per claim 8 

Hellman discloses a method, wherein the second computer is configured to generate a 
challenge that is a random number and the first computer is configured to generate a response to 
the challenge by performing a predetermined function on the random number (column 7: lines 
16-40). 

As per claim 9: 

Hellman discloses a method, wherein the second computer is configured to determine 
whether the response is valid by performing the predetermined fimction on the random number 
and comparing the result to the response (column 3: lines 60-67; column 5: lines 1-10). 

As per claim 10: 

Hellman discloses a method, wherein the predetermined fiinction is a hash fiinction 
(column 2: lines 50 -58). 

As per claim 1 1 : 

Hellman discloses a method, wherein the second computer establishes a connection with 
the first computer when the response is valid (column 3: lines 25-35). 
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As per claim 12: 

Heliman discloses a method, wherein the first computer issues a credential with a time 
limit and the first computer determines whether the credential transmitted fi-om the second 
computer is valid by determining the expiration time of the credential (column 3: lines 25-35). 

As per claim 49: 

Heliman discloses a method for authenticating a computer, the method comprising the 
following steps: 

in response to a connection between the first computer and the second computer being 
terminated, transmitting said credential and a computer challenge from the second 
computer to the first computer when the second computer is to be authenticated 
(column 6: lines 57-67; figure 1: 16, 18; column 6: lines 23-45); 

transmitting a response to said computer challenge from said first computer to said 
second computer (figure 1: 16, 18; column 6: lines 23-45); and 

verifying at said second computer whether said response is valid, wherein said second 
computer re-establishes a cormection with the first computer when the response is 
valid (figure 1: 16, 18; column 6: lines 23-45; column 5: lines 50-60). 

Heliman does not explicitly disclose issuing a credential from a first computer to a 
second computer and authentication of the computers. Salowey, in analogous art, however, 
discloses issuing a credential fi*om a first computer to a second computer and authentication of 
the computers (Column 3: lines 35-40; column 4: lines 15-21; column 6: lines 15-21; column 7: 
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lines 1-10). Therefore, it would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to modify the system disclosed by Hellman to include 
authentication of the computers. This modification would have been obvious because a person 
having ordinary skill in the art would have been motivated to do so to provide a method for 
communicating a security credential within a network device authentication conversation as 
suggested by Salowey in (column 3: lines 15-27). 

7. Claims 13-18, 24-29, 35-40, 48, .50-51 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Hellman (US Pat. No.: 5, 872, 917) in view of Salowey t al. (hereinafter 
referred to as Salowey, US Pat. No.: 7, 171,555), and further in view of Kumar et al. (hereinafter 
referred to as Kumar, US Pat. No.: 6,535,980). 

As per claim 13: 

Hellman discloses a method for authenticating a computer, the method comprising the 

steps: 

generating with the second computer a first challenge (column 6: lines 57-67); 
transmitting the credential and the first challenge from the second computer to the first 

computer (figure 1 : 16, 18; column 6: lines 23-45); 
determining with the first computer whether the credential is valid (column 5: lines 50- 

60); 

computing a first response to the first challenge and generating a second challenge with 
the first computer (column 6: lines 57-67); 
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transmitting the first response and the second challenge from the first computer to the 
second computer (column 3: lines 30-45; column 6: lines 23-45); 

determining with the second computer whether the second response is valid (column 5: 
lines 50-60); 

computing a second response to the second challenge with the second computer (column 
6: lines 57-67); 

transmitting the second response from the second computer to the first computer (column 

3: lines 30-45; column 6: lines 23-45); and 
determining with the first computer whether the second response is valid to verify 

(column 3: lines 1-45; column 5: lines 33-45). 

Hellman does not explicitly disclose issuing a credential from a first computer to a 
second computer and authentication of the computers. Salowey, in analogous art, however, 
discloses issuing a credential fi-om a first computer to a second computer and authentication of 
the computers (Column 3: lines 35-40; column 4: lines 15-21; column 6: lines 15-21; column 7: 
lines 1-10). Therefore, it would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to modify the system disclosed by Hellman to include 
authentication of the computers. This modification would have been obvious because a person 
having ordinary skill in the art would have been motivated to do so to provide a method for 
communicating a security credential within a network device authentication conversation as 
suggested by Salowey in (column 3: lines 15-27). 
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Hellman and Salowey do not explicitly disclose the first challenge, the first response, the 
second challenge, and the second response. Kumar, ^n analogous art, however, discloses the first 
challenge, the first response, the second challenge, and the second response (figure 1: 1, 2, 
Column 2: lines column 2: lines 30-50). Therefore, it would have been obvious to a person 
having ordinary skill in the art at the time the invention was made to modify the system disclosed 
by Hellman and Salowey to include the first challenge, the first response, the second challenge, 
and the second response. This modification would have been obvious because a person having 
ordinary skill in the art would have been motivated to do so to provide a secure method of data 
transfer using a challenge response in which a correct response to a challenge is used to transmit 
the value "1", while a deliberately false response is made to transmit the value "0" as suggested 
by Kumar in (column 2: lines 22-27). 

As per claim 24: 

Hellman discloses a method computer-readable medium containing a program with 
instructions that execute the following procedure; 

generate a first challenge with the second computer (column 6: lines 57-67); 

transmit the credential and the first challenge from the second computer to the first 

computer (figure 1 : 16, 18; column 6: lines 23-45);. 
determine with the first computer whether the credential is valid (column 5: lines 50-60); 
compute a first response to the first challenge and generate a second challenge with the 

first computer (column 6: lines 57-67); 
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transmit the first response and the second challenge fi*om the first computer to the second 

computer (column 3; lines 30-45; column 6: lines 23-45); 
determine with the second computer whether the first response is valid to verify the first 

computer (column 5: lines 50-60); 
compute a second response to the second challenge with the second computer; transmit 

the second response fi*om the second computer to the first computer (column 6: 

lines 57-67); and 

determine with the first computer whether the second response is valid to verify and 
authenticate the computers (column 3: lines 1-45; column 5: lines 33-45). 

Hellman does not explicitly disclose issuing a credential from a first computer to a 
second computer and authentication of the computers. Salowey, in analogous art, however, 
discloses issuing a credential from a first computer to a second computer and authentication of 
the computers (Column 3: lines 35-40; column 4: lines 15-21; column 6: lines 15-21; column 7: 
lines 1-10). Therefore, it would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to modify the system disclosed by Hellman to include 
authentication of the computers. This modification would have been obvious because a person 
having ordinary skill in the art would have been motivated to do so to provide a method for 
communicating a security credential within a network device authentication conversation as 
suggested by Salowey in (column 3: lines 15-27). 
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Hellman and Salowey do not explicitly disclose the first challenge, the first response, the 
second challenge, and the second response. Kumar, in analogous art, however, discloses the first 
challenge, the first response, the second challenge, and the second response (figure 1: 1, 2, 
Column 2: lines column 2: lines 30-50). Therefore, it would have been obvious to a person 
having ordinary skill in the art at the time the invention was made to modify the system disclosed 
by Hellman and Salowey to include the first challenge, the first response, the second challenge, 
and the second response. This modification would have been obvious because a person having 
ordinary skill in the art would have been motivated to do so to provide a secure method of data 
transfer using a challenge response in which a correct response to a challenge is used to transmit 
the value "1", while a deliberately false response is made to transmit the value "0" as suggested 
by Kumar in (column 2: lines 22-27). 

As per claim 35: 

Hellman discloses a method and system for authenticating a computer, the system 
comprising: 

a first computer (figure 1 : 12); and 

a second computer in communication with the first computer (figure 1 : 14-22); 

wherein the first computer and the second computer are configured to execute the 

following instructions (figure 1: 14-22): 
generate a first challenge with the second computer (column 6: lines 57-67); 
transmit the credential and the first challenge from the second computer to the first 

computer (figure 1: 16, 18; column 6: lines 23-45); 
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determine with the first computer whether the credential is valid (column 5: lines 50-60); 
compute a first response to the first challenge and generate a second challenge with the 

first computei- (column 6: lines 57-67); 
transmit the first response and the second challenge firom the first computer to the second 

computer (column 3: lines 30-45; column 6: lines 23-45); 
determine with the second computer whether the first response is valid (column 5: lines 

50-60); 

compute a second response to the first challenge with the second computer (column 6: 
lines 57-67); 

transmit the second response from the second computer to the first computer (column 3: 

lines 30-45; column 6: lines 23-45); and 
determine with the first computer whether the second response is valid to authenticate 

and verify the computers (column 3: lines 1-45; column 5: lines 33-45). 

Hellman does not explicitly disclose issuing a credential fi-om a first computer to a 
second computer and authentication of the computers. Salowey, in analogous art, however, 
discloses issuing a credential from a first computer to a second computer and authentication of 
the computers (Column 3: lines 35-40; column 4: lines 15-21; column 6: lines 15-21; column 7: 
lines 1-10). Therefore, it would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to modify the system disclosed by Hellman to include 
authentication of the computers. This modification would have been obvious because a person 
having ordinary skill in the art would have been motivated to do so to provide a method for 
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communicating a security credential within a network device authentication conversation as 
suggested by Salowey in (column 3: lines 15-27). 

Hellman and Salowey do not explicitly disclose the first challenge, the first response, the 
second challenge, and the second response. Kumar, in analogous art, however, discloses the first 
challenge, the first response, the second challenge, and the second response (figure 1: 1, 2, 
Column 2: lines column 2: lines 30-50). Therefore, it would have been obvious to a person 
having ordinary skill in the art at the time the invention was made to modify the system disclosed 
by Hellman and Salowey to include the first challenge, the first response, the second challenge, 
and the second response. This modification would have been obvious because a person having 
ordinary skill in the art would have been motivated to do so to provide a secure method of data 
transfer using a challenge response in which a correct response to a challenge is used to transmit 
the value "1", while a deliberately false response is made to transmit the value "0" as suggested 
by Kumar in (column 2: lines 22-27). 

As per claims 14, 25 and 36: 

Hellman discloses a method, system and computer readable medium having instructions, 
wherein the second computer encrypts the credential before transmitting the credential to the first 
computer (column 2: lines 35-55). 



As per claims 15, 26 and 37: 
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Hellman discloses a method, system and computer readable medium having instructions, 
wherein the first computer challenge is a random number generated by the second computer and 
the first computer computes a first response to the first challenge by performing a predetermined 
function on the random number (column 5: lines 56-67). 

As per claims 16, 27 and 38: 

Salowey discloses a method, system and computer readable medium having instructions, 
wherein the second computer determines whether the first response is valid by performing the 
predetermined function on the random number and comparing the result to the first response 
(column 5: lines 50-55). 

As per claims 17, 28 and 39: 

Hellman discloses a method, system and computer readable medium having instructions, 
wherein the predetermined fimction is a hash fiinction (column 7: lines 51-15). 

As per claims 18, 29 and 40: 

Hellman discloses a method, system and computer readable medium having instructions, 
wherein the second challenge is a random number generated by the first computer and the second 
computer computes a second response to the second challenge by performing a predetermined 
function on the random number (column 5: lines 56-67). 



As per claim 48: 
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Hellman discloses a method of authentication performed between a first user and a 
second user with a computer, the method comprising the steps of: 

generating a first challenge with the second user (column 6: lines 57-67); 

transmitting the credential and the first challenge to the first user (figure 1: 16, 18; 

column 6: lines 23-45); 
determining with the first user whether the credential is valid (column 5: lines 50-60); 
generating with the first user a first response to the first challenge and a second challenge 

(column 6: lines 57-67); 
transmitting the first response and the second challenge to the second user (figure 1: 16, 

1 8; column 6: lines 23-45); 
determining with the second user whether the first response is valid (column 5: lines 50- 

60); 

generating with the second user a second response to the second challenge (column 6: 
lines 57-67); 

transmitting the second response to the first user (figure 1 : 16, 18; column 6: lines 23-45); 
and 

determining with the first user whether the second response is valid in order to 
authenticate and verify the first and second users (column 5: lines 50-60); 

Hellman does not explicitly disclose issuing a credential from a first computer to a 
second computer and authentication of the computers. Salowey, in analogous art, however, 
discloses issuing a credential from a first computer to a second computer and authentication of 
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the computers (Column 3: lines 35-40; column 4: lines 15-21; column 6: lines 15-21; column 7: 
lines 1-10). Therefore, it would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to modify the system disclosed by Hellman to include 
authentication of the computers. This modification would have been obvious because a person 
having ordinary skill in the art would have been motivated to do so to provide a method for 
communicating a security credential within a network device authentication conversation as 
suggested by Salowey in (column 3: lines 15-27). 

Hellman and Salowey do not explicitly disclose the first challenge, the first response, the 
second challenge, and the second response. Kumar, in analogous art, however, discloses the first 
challenge, the first response, the second challenge, and the second response (figure 1: 1, 2, 
Column 2: lines column 2: lines 30-50). Therefore, it would have been obvious to a person 
having ordinary skill in the art at the time the invention was made to modify the system disclosed 
by Hellman and Salowey to include the first challenge, the first response, the second challenge, 
and the second response. This modification would have been obvious because a person having 
ordinary skill in the art would have been motivated to do so to provide a secure method of data 
transfer using a challenge response in which a correct response to a challenge is used to transmit 
the value "1", while a deliberately false response is made to transmit the value "0" as suggested 
by Kumar in (column 2: lines 22-27). 



As per claim 50: 
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Hellman and Salowey do not explicitly disclose the challenge comprises a random 
number generated by the second computer, wherein the first computer generates the response to 
the challenge by calculating a predetermined function of the random number, and wherein the 
second computer verifies whether the response is valid by calculating the predetermined function 
of the random number and comparing the result of the calculation to the response. Kumar, in 
analogous art, however, discloses the challenge comprises a random number generated by the 
second computer, wherein the first computer generates the response to the challenge by 
calculating a predetermined function of the random number, and wherein the second computer 
verifies whether the response is valid by calculating the predetermined function of the random 
number and comparing the result of the calculation to the response (figure 1: 1, 2, Column 2: 
lines column 2: lines 30-50). Therefore, it would have been obvious to a person having ordinary 
skill in the art at the time the invention was made to modify the system disclosed by Hellman and 
Salowey to include the first challenge, the first response, the second challenge, and the second 
response. This modification would have been obvious because a person having ordinary skill in 
the art would have been motivated to do so to provide a secure method of data transfer using a 
challenge response in which a correct response to a challenge is used to transmit the value "1", 
while a deliberately false response is made to transmit the value "0" as suggested by Kumar in 
(column 2: lines 22-27). 

As per claim 51: 

Hellman discloses a method, wherein the first computer issues the credential with an 
expiration time, the method comprising checking at the first computer whether the credential 
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transmitted from the second computer is valid by determining whether the expiration time of the 
credential has been exceeded (column 3: lines 25-35). 

8. Claims 19-23, 30- 34 and 41-44 are rejected under 35 U.S.C. 103(a) as being 
unpatentable oyer Hellman (US Pat. No.: 5, 872, 917) and Salowey t al (hereinafter referred to 
as Salowey, US Pat. No.: 7, 171,555), in view of and Kumar et al. (hereinafter referred to as 
Kumar, US Pat. No.: 6,535,980) further in view of. 

As per claims 1 9, 30 and 41: 

Hellman Salowey and Kumar do not explicitly disclose the first computer determines 
whether the second response is valid by performing the predetermined function on the random 
number and comparing the result to the second response. Yokota, in analogous art, however, 
discloses the first computer determines whether the second response is valid by performing the 
predetermined function on the random number and comparing the result to the second response 
(column 5: lines 65-67; column 6: lines 1-15). Therefore, it would have been obvious to a person 
having ordinary skill in the art at the time the invention was made to modify the system disclosed 
by Hellnian to include the first computer determines whether the second response is valid by 
performing the predetermined Sanction on the random number and comparing the result to the 
second response. This modification would have been obvious because a person having ordinary 
skill in the art would have been motivated to do so to provide methods for authentication 
between apparatuses using a challenge and response system with improved security against 
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spoofing, even when the same piece of challenge data that is used in a past authentication is 
reused as suggested by Yokota in (column 2: lines 22-27). 

As per claims 20, 3 1 and 42: 

Hellman discloses a method, system and computer readable medium having instructions, 
wherein the predetermined function is a hash function (column 7: lines 51-15). 

As per claims 21,32 and 43: 

Yokota discloses a method, system and computer readable medium having instructions, 
wherein the first computer issues the credential with an expiration time and the first computer 
determines whether the credential transmitted from the second computer is valid by determining 
the expiration time of the credential (column 3: lines 25035). 

As per claims 22, 33 and 44: 

Yokota discloses a method, system and computer readable medium having instructions, 
wherein comprising the steps of: 

encrypting the first challenge vvith the second computer before transmitting to the first 

computer (figure 14: 94); 
decrypting the first challenge with the first computer before determining whether the first 

response is computed (figure 14: 103); 
encrypting the first response and the second challenge with the first computer before 
transmitting (figure 14: 94); 
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decrypting the first response and the second challenge with the second computer before 
determining whether the first response is valid and the second response is 
computed (figure 14: 103); 

encrypting the second response with the second computer before transmitting (figure 14: 
94); and 

decrypting the second response with the first computer before determining whether the 
second response is valid (figure 14: 103). 

As per claims 23 and 34: 

Yokota discloses a method and computer readable medium having instructions, wherein 
the credential is encrypted before issuing the credential to the second computer and the credential 
is decrypted by the first computer when returned by the second computer (figure 14: 103; figure 
14:94). ' 

Conclusion 

9. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

See the notice of reference cited in form PTO-892 for additional prior art. 

Contact Information 

10. Any inquiry concerning this communication or earHer communications . from the 
examiner should be directed to Techane J. Gergiso whose telephone number is (571) 272-3784 
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and fax number is WSSSM^^Tm , The examiner can normally be reached on 9:00am - 6:00pm. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Emmanuel Moise can be reached on (571) 272-3865. The fax phone number for the organization 
where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system; Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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